SN
Product
Snapdragon
On CISA KEVExploited in the wild
154
CVEs
8
On KEV
9.8
Max CVSS
15
New 30D
Severity mix
Critical 3High 120Medium 31Low 0
Watch
Add Snapdragon to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-21479 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Affected: AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2025-21480 In wildKEV | 8.6 | Jun 3 | Incorrect Authorization in Graphics Windows Affected: AQT1000; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; +34 more |
| CVE-2026-21385 In wildKEV | 7.8 | Mar 2 | Integer Overflow or Wraparound in Graphics Affected: 5G Fixed Wireless Access Platform; APQ8098; AR8031; AR8035; C-V2X 9150; CSRA6620; +34 more |
| CVE-2024-43047 In wildKEV | 7.8 | Oct 7 | Use After Free in DSP Service Affected: FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8295P; QCA6174A; +34 more |
| CVE-2023-33107 In wildKEV | 7.8 | Dec 5 | Integer Overflow or Wraparound in Graphics Linux Affected: 315 5G IoT Modem; APQ8017; APQ8064AU; AQT1000; AR8031; AR8035; +34 more |
| CVE-2023-33106 In wildKEV | 7.8 | Dec 5 | Use of Out-of-range Pointer Offset in Graphics Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2023-33063 In wildKEV | 7.8 | Dec 5 | Use After Free in DSP Services Affected: 315 5G IoT Modem; APQ8017; AQT1000; AR8031; AR8035; AR9380; +34 more |
| CVE-2025-27038 In wildKEV | 7.5 | Jun 3 | Use After Free in Graphics Affected: AR8031; CSRA6620; CSRA6640; FastConnect 7800; QCA2066; QCA6391; +34 more |
| CVE-2026-25254 | 9.8 | Sep 22 | Improper authorization in Qualcomm Software Center Affected: QSCv1.17.1; QSCv1.19.1; QSCv1.21.0 |
| CVE-2026-25293 | 9.8 | May 4 | Incorrect authorization in PLC FW Affected: QCA7005 |
| CVE-2026-25289 | 9.6 | Aug 4 | Stack-based Buffer Overflow in WLAN Firmware Affected: AR8035; Cologne; CQ7790; CQ8725S; CQ8750M; FastConnect 6200; +34 more |
| CVE-2026-25265 | 8.8 | Sep 22 | Creation of Temporary File with Insecure Permissions in Qualcomm Software Center Affected: QSCv1.17.1; QSCv1.19.1; QSCv1.21.0; QSCv1.22.1; QSCv1.25.1; QSCv1.26.0 on Windows |
| CVE-2026-25264 | 8.8 | Sep 22 | Uncontrolled Search Path Element in Qualcomm Software Center Affected: QSCv1.17.1; QSCv1.19.1; QSCv1.21.0; QSCv1.22.1; QSCv1.25.1; QSCv1.26.0 on Windows |
| CVE-2026-25283 | 8.8 | Sep 17 | Stack-based Buffer Overflow in OOBM Affected: Cologne; FastConnect 7800; Snapdragon X2 Elite; WCD9378C; WSA8840; WSA8845; +1 more |
| CVE-2026-25268 | 8.8 | Jul 6 | Stack-based Buffer Overflow in WLAN Host Affected: 5G Fixed Wireless Access Platform; AR8035; CQ7790; CQ8725S; CSR8811; FastConnect 6700; +34 more |
| CVE-2026-25277 | 8.8 | Jun 1 | Buffer Copy Without Checking Size of Input in Secure Processor Affected: Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5 |
| CVE-2026-25276 | 8.8 | Jun 1 | Improper Validation of Array Index in Secure Processor Affected: Snapdragon 8 Gen 2 Mobile Platform; Snapdragon 8+ Gen 2 Mobile Platform; Snapdragon 8 Gen 3 Mobile Platform; Snapdragon 8 Elite; Snapdragon 8 Elite Gen 5 |
| CVE-2025-47392 | 8.8 | Apr 6 | Integer Overflow or Wraparound in GPS Affected: 5G Fixed Wireless Access Platform; AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; +34 more |
| CVE-2024-33035 | 8.4 | Sep 2 | Integer Overflow or Wraparound in Display Affected: FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; FastConnect 7800; QAM8255P; +34 more |
| CVE-2024-23365 | 8.4 | Sep 2 | Use After Free in SCE-Mink Affected: FastConnect 7800; QAM8255P; QAM8650P; QAM8775P; QAMSRV1H; QAMSRV1M; +34 more |
| CVE-2026-24088 | 8.2 | Jun 1 | Missing Authentication for Critical Function in Boot Affected: XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX |
| CVE-2024-23359 | 8.2 | Sep 2 | Buffer Over-read in Multi Mode Call Processor Affected: 315 5G IoT Modem; 9205 LTE Modem; 9206 LTE Modem; APQ8017; APQ8037; AQT1000; +34 more |
| CVE-2026-24079 | 8.1 | Aug 4 | Missing Authentication for Critical Function in Data Modem Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2026-25282 | 7.9 | Sep 17 | Out-of-bounds Read in OOBM Affected: Cologne; FastConnect 7800; Snapdragon X2 Elite; WCD9378C; WSA8840; WSA8845; +1 more |
| CVE-2026-57559 | 7.8 | Oct 6 | Use After Free in DSP_Services Affected: Cologne; FastConnect 6700; FastConnect 6900; FastConnect 7800; IQX5121; QCA0000; +16 more |
| CVE-2026-57555 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: Cologne; FastConnect 6700; FastConnect 6900; FastConnect 7800; IQX5121; QCA0000; +16 more |
| CVE-2026-57554 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6900; +34 more |
| CVE-2026-57545 | 7.8 | Oct 6 | Untrusted Pointer Dereference in Graphics Affected: Cologne; CQ7790; CQ8725S; CQ8750M; CSRA6620; CSRA6640; +34 more |
| CVE-2026-57537 | 7.8 | Oct 6 | Use After Free in DSP Service Affected: FastConnect 6900; FastConnect 7800; IQ10 Series; Pandeiro; QCA6595AU; QCA6698AQ; +34 more |
| CVE-2026-25291 | 7.8 | Oct 6 | Use After Free in Graphics Affected: FastConnect 6700; FastConnect 6900; FastConnect 7800; LeMans_AU_LGIT; LeMansAU; Orne; +34 more |
| CVE-2026-25267 | 7.8 | Oct 6 | Missing Authorization in Core Affected: 315 5G IoT Modem; 5G Fixed Wireless Access Platform; 9205 LTE Modem; 9205S Modem; AQT1000; AR8031; +34 more |
| CVE-2026-25255 | 7.8 | Sep 22 | Exposed function in Qualcomm Package Manager and Qualcomm Software Center. Affected: QSCv1.17.1; QSCv1.19.1; QSCv1.21.0; QPMv3.0.125.4; QPMv3.0.126.7; QPMv3.0.127.2 |
| CVE-2026-25290 | 7.8 | Sep 17 | Integer Overflow or Wraparound in OOBM Affected: Cologne; FastConnect 7800; Snapdragon X2 Elite; WCD9378C; WSA8840; WSA8845; +1 more |
| CVE-2026-25280 | 7.8 | Sep 17 | Out-of-bounds Write in DSP Service Affected: Cologne; FastConnect 6700; FastConnect 6900; FastConnect 7800; IQX5121; IQX7181; +14 more |
| CVE-2026-25261 | 7.8 | Sep 17 | Untrusted Pointer Dereference in Camera Affected: Cologne; FastConnect 6700; FastConnect 6900; FastConnect 7800; IQX5121; IQX7181; +18 more |
| CVE-2026-24074 | 7.8 | Sep 17 | Out-of-bounds Write in Video Affected: Cologne; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; IQX5121; +19 more |
| CVE-2026-24073 | 7.8 | Sep 17 | Out-of-bounds Write in Video Affected: Cologne; FastConnect 6900; FastConnect 7800; IQX5121; IQX7181; QCA0000; +8 more |
| CVE-2025-59607 | 7.8 | Sep 17 | Untrusted Pointer Dereference in Windows Compute Affected: Cologne; FastConnect 6900; FastConnect 7800; SC8380XP; Snapdragon 8cx Gen 3 Compute Platform; Snapdragon X2 Elite; +8 more |
| CVE-2026-24083 | 7.8 | Aug 4 | Untrusted Pointer Dereference in Automotive Security Affected: QAM8295P; QCA6696; SA8295P |
| CVE-2026-24080 | 7.8 | Aug 4 | Buffer Copy Without Checking Size of Input in Biometrics Affected: Cologne; FastConnect 6700; FastConnect 6900; FastConnect 7800; QAM8255P; QAM8295P; +30 more |
| CVE-2026-21366 | 7.8 | Aug 4 | Integer Overflow or Wraparound in Data Network Stack & Connectivity Affected: LeMans_AU_LGIT; LeMansAU; QAM8255P; QAM8295P; QAM8620P; QAMSRV1H; +27 more |
| CVE-2026-21379 | 7.8 | Jul 6 | Buffer Over-read in Windows Compute Affected: AQT1000; Cologne; FastConnect 6200; FastConnect 6700; FastConnect 6800; FastConnect 6900; +34 more |
| CVE-2025-59616 | 7.8 | Jul 6 | Use After Free in Computer Vision Affected: FastConnect 6700; FastConnect 6900; FastConnect 7800; Molokai; Orne; Pandeiro; +34 more |
| CVE-2025-59615 | 7.8 | Jul 6 | Use After Free in Computer Vision Affected: FastConnect 6700; FastConnect 6900; FastConnect 7800; Molokai; Orne; Pandeiro; +34 more |
| CVE-2026-25259 | 7.8 | Jun 1 | Out-of-bounds Write in DSP Service Affected: Cologne; FastConnect 6900; FastConnect 7800; QCA0000; SC8380XP; WCD9378C; +13 more |
| CVE-2026-25258 | 7.8 | Jun 1 | Out-of-bounds Read in DSP Service Affected: Cologne; FastConnect 6900; FastConnect 7800; QCA0000; SC8380XP; WCD9378C; +13 more |
| CVE-2025-59606 | 7.8 | Jun 1 | NULL Pointer Dereference in HLOS Affected: Cologne; FastConnect 6200; FastConnect 6700; FastConnect 6900; FastConnect 7800; G2 Gen 1; +34 more |
| CVE-2025-59605 | 7.8 | Jun 1 | Out-of-bounds Write in HLOS Affected: AR8035; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; FastConnect 6800; +34 more |
| CVE-2025-59604 | 7.8 | Jun 1 | NULL Pointer Dereference in SPS Applications Affected: AR8035; Cologne; CSRA6620; CSRA6640; FastConnect 6200; FastConnect 6700; +34 more |
| CVE-2026-25266 | 7.8 | May 4 | Exposed dangerous function in windows host Affected: Cologne; FastConnect 6900; FastConnect 7800; SC8380XP; Snapdragon AR1 Gen 1 Platform; WCD9378C; +18 more |